topic Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize) in General Topics

ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Jafar_Hussain — Sun, 05 Jan 2020 13:36:07 GMT

Hello All,

The firewalls are configured in high availability (A/P) but the running configuration is not synchronized.

I have already tried to restarting management server of both firewall as well I tried to sync manually but getting below error:-

After that, I have tried to sync from CLI mode by this command:- request high-availability sync-to-remote running-config

is showing failed to synchronize running-config.

Can anyone help me?

Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

MP18 — Sun, 05 Jan 2020 19:31:10 GMT

On the Active PA click on syn to peer

Also before that install all the dynamic updates on both active and passive firewall

Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Jafar_Hussain — Sun, 05 Jan 2020 19:40:07 GMT

@MP18 I have tried already but same issue persist.

Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

MP18 — Sun, 05 Jan 2020 19:50:28 GMT

Try this on PAssive PA

request high-availability sync-to-remote running-config

Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Jafar_Hussain — Sun, 05 Jan 2020 19:53:11 GMT

@MP18 I have tried this command to both firewall but same issue was happening.

Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

MP18 — Sun, 05 Jan 2020 20:00:41 GMT

On active PA any change done?

if you revert back to previous config on active PA does it work?

Paste the output of

less mp-log ha_agent.log

Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

MP18 — Sun, 05 Jan 2020 20:04:11 GMT

Also For successful HA configuration, the below must match between the two firewalls.

Version Compatibility:
Software Version: Match
Application Content Compatibility: Match
Anti-Virus Compatibility: Match
Threat Content Compatibility: Match
VPN Client Software Compatibility: Match
Global Protect Client Software Compatibility: Match

Re: ACTICE/PASSIVE CONFIG SYNC PROBLEM( Running cofiguration not synchronize)

Jafar_Hussain — Mon, 06 Jan 2020 12:50:51 GMT

@ It is necessary to import all certificates from active firewall to passive firewall?